Filter
Top Products
DES-7200 Configuration Guide Chapter 4 802.1x Configuration
4-33
Command Function
configure terminal
Enter the global configuration mode.
interface interface_id
Enter the interface configuration mode.
dot1x port-control auto
Enable the 802.1x authentication on the interface.
6) enable the VLAN auto-switching on the interface
Command Function
configure terminal
Enter the global configuration mode.
interface interface_id
Enter the interface configuration mode.
dot1x dynamic-vlan enable
Enable the VLAN auto-switching on the interface.
Caution
For the VLAN auto-switching function, the dynamic switching must be
enabled on the interface. That is, use the dot1x dynamic-vlan enable
command in the interface configuration mode. Or the RADIUS attributes of
the encapsulted assigned VLAN will be ignored.
In the interface configuration mode, the dot1x dynamic-vlan enable
command must be configured after the dot1x port-control auto command
has been configured. With the dot1x port-control auto command
configured, the VLAN auto-switching function is disabled.
The private vlan does not support the dynamic VLAN switching function.
That is, the private vlan cannot be set as the 802.x dynamic vlan.
7) view the dynamic VLAN auto-switching settings
Command Function
show dot1x user id session_id
View the user information in session-id, including
the dynamic VLAN auto-switching information.
show dot1x summary
View the actual VLAN where the user is.
For the related precautions, see the chapter of Other Precautions of 802.1x Configuration.
4.2.25 Implementing GUEST
VLAN Function
If guest vlan is set on the switch, then when the port sends the authentication requests of
certain quantity proactively but receives no corresponding reply or eapol packet, you can add
the port to guest vlan. Use show runninng-config to view the configuration and show vlan
to check whether the port jumps to guest vlan or not .
Follow these steps to configure a port to allow GUEST VLAN jump or not: